OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP code, because file extensions other than .html are permitted.
2f71b923fd12139847ac2ff8144d07a7250e7131bad2b3d7db85ba17ff41bf94